Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS136725.roa
File: AS136725.roa (raw, json)
Hash identifier: gcq9xpKBZbAm4JeJg3sAzx71/flzkirBaziD8ZQ3RkY=
Subject key identifier: 1E:31:EB:8F:1D:01:51:22:25:B1:BA:15:55:3A:FC:BB:E4:2E:C7:78
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2D47589D6917552E462B4EA11E4A8A9CFD0B3F58
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS136725.roa
Signing time: Mon 27 Jul 2026 03:43:03 +0000
ROA not before: Mon 27 Jul 2026 03:38:03 +0000
ROA not after: Mon 26 Jul 2027 03:43:03 +0000
asID: 136725
IP address blocks: 178.95.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:47:58:9d:69:17:55:2e:46:2b:4e:a1:1e:4a:8a:9c:fd:0b:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 27 03:38:03 2026 GMT
Not After : Jul 26 03:43:03 2027 GMT
Subject: CN=1E31EB8F1D01512225B1BA15553AFCBBE42EC778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:49:17:aa:10:a5:1e:b4:f6:24:c5:d7:05:
5d:53:e9:70:9b:f1:b0:26:ca:4f:76:e2:95:08:a5:
f2:23:d4:19:cd:c7:3b:6f:b0:30:f5:47:f8:5d:c5:
d3:5b:b7:4a:8c:65:c3:a3:a5:a7:0b:19:3b:af:76:
17:8f:70:5b:3f:f5:73:3a:8a:39:9e:e1:4a:93:62:
97:20:34:30:d0:a5:fa:7f:be:03:fb:e1:47:d5:f4:
14:cc:d7:50:c2:4e:1d:fa:d5:7e:6b:ca:a3:49:20:
b9:cb:6a:d2:20:d3:f7:bf:ab:24:de:c6:c9:06:5e:
a2:6f:ba:42:f6:d5:7f:88:8a:50:7d:72:de:ff:af:
32:77:7a:8e:41:70:38:5f:1c:9d:34:cd:a6:d8:02:
03:f9:6a:50:ad:e1:41:28:d8:37:a4:15:0c:c0:b4:
54:06:28:18:8d:fe:bd:ab:96:a2:de:f1:6f:ac:80:
a4:66:ba:cc:5e:31:bb:43:b4:cc:04:0a:00:8e:77:
cc:db:c3:b9:61:2e:24:aa:e6:b1:f6:67:d2:35:62:
2f:0a:a3:d0:f5:a7:5a:64:03:0a:e3:3b:1d:1f:bb:
1e:2b:ce:ce:fa:4c:57:44:ec:70:5d:2e:d5:57:0b:
44:bc:44:01:6b:49:44:0b:92:a2:bc:9a:94:1a:f1:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:EB:8F:1D:01:51:22:25:B1:BA:15:55:3A:FC:BB:E4:2E:C7:78
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS136725.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.192.0/24
Signature Algorithm: sha256WithRSAEncryption
79:91:d5:0b:3c:3e:0e:da:8b:1f:c0:f4:86:71:32:b1:a1:50:
7a:e2:45:ad:db:5f:f0:a1:df:59:4b:1f:36:c1:c7:d9:ce:98:
c1:70:ed:9e:c9:9d:9a:cd:71:55:12:f2:bf:ac:d9:1e:93:58:
45:a8:90:5d:d1:26:d7:5c:a5:86:17:c5:bc:05:96:14:2e:e7:
e2:59:e2:9b:e5:8f:0b:98:51:91:8b:67:2f:96:35:9a:dc:79:
54:0d:80:53:ae:59:63:fd:7e:ab:f6:c8:04:42:a3:15:e0:21:
e0:7d:3d:b4:00:15:07:c5:1e:b1:1b:95:e9:25:22:0c:2f:47:
6e:3e:67:0f:a5:47:f1:12:9b:14:b4:8b:68:15:36:7b:bf:ac:
1c:bf:3a:d8:e2:01:74:40:2b:e5:dd:c9:2e:b4:66:e0:37:41:
21:21:90:1a:44:59:17:12:d7:03:89:cd:92:d8:ec:b4:8e:71:
60:1d:75:38:21:34:ce:36:f3:c2:16:af:3a:bc:67:63:bd:cb:
aa:ae:d8:0f:8f:eb:3d:1b:54:dc:43:1c:e0:5f:c7:9d:34:22:
6f:64:19:d9:63:e8:cc:73:9f:22:dd:89:c0:db:66:ba:2d:bb:
51:0f:91:91:e2:58:7a:0b:94:b0:68:e1:30:bf:c1:2d:95:0e:
17:d7:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:18:04 2026 by rpki-client